Python中网易云评论区的encSecKey参数加密怎么正确处理？

Question

小白尝试爬取网易云评论区内容在encSecKey参数处理上破防了求大神帮忙看一下，我看js基本上都靠gpt

params参数目前已搞定，由于js会在每次请求生成一个16位的随机数i作为params参数第二层加密的密钥，encSecKey是这个随机数i的RSA加密结果，目前可以做到现去网页手动扒i和encSecKey扔进post请求最后获得正确的json文件，但是一旦这个随机数自己生成并RSA加密返回的就是空内容状态码200，还有一个小点就是晚上拿中午取下来的i和encSecKey进行请求请求好像会被挂起
下面getRSAkey是我的key加密代码

    def getAEStext(self, a, b):
        iv = "0102030405060708"
        a = pad(a.encode('utf-8'), AES.block_size)
        cipher = AES.new(key=b.encode('utf-8'), mode=AES.MODE_CBC, IV=iv.encode('utf-8'))
        ciphertext = cipher.encrypt(a)
        print(base64.b64encode(ciphertext).decode('utf-8'))
        return base64.b64encode(ciphertext).decode('utf-8')
    def getRSAkey(self):
        e = int(self.e,16)#指数
        f = int(self.f,16)#模
        public_key = RSA.construct((f, e))
        #print(f'public_key{public_key}')
        cipher = PKCS1_OAEP.new(public_key)
        encrypted_message = cipher.encrypt(self.i.encode('utf-8'))
        #print('key')
        return encrypted_message.hex()

下面是网页的js，函数c是key的加密

    function c(a, b, c) {
        var d, e;
        return setMaxDigits(131),
        d = new RSAKeyPair(b,"",c),
        e = encryptedString(d, a)
    }
    function d(d, e, f, g) {
        var h = {}
          , i = a(16);//产生16位随机数
        return h.encText = b(d, g),//g和i是密钥
        h.encText = b(h.encText, i),//返回的是parmas
        h.encSecKey = c(i, e, f),
        h
    }

Answer 1

Python

from Crypto.Cipher import AES
from Crypto.Util.Padding import pad, unpad
from Crypto.PublicKey import RSA
from Crypto.Cipher import PKCS1_OAEP
import base64
import random
import string

def generate_random_string(length=16):
    return ''.join(random.choices(string.ascii_letters + string.digits, k=length))

def generate_iv():
    return ''.join(random.choices(string.ascii_letters + string.digits, k=16)).encode('utf-8')

def getAEStext(a, b):
    iv = generate_iv()
    a = pad(a.encode('utf-8'), AES.block_size)
    cipher = AES.new(key=b.encode('utf-8'), mode=AES.MODE_CBC, IV=iv)
    ciphertext = cipher.encrypt(a)
    return base64.b64encode(iv + ciphertext).decode('utf-8')

def getRSAkey(e_hex, f_hex, message):
    e = int(e_hex, 16)
    f = int(f_hex, 16)
    public_key = RSA.construct((f, e))
    cipher = PKCS1_OAEP.new(public_key)
    encrypted_message = cipher.encrypt(message.encode('utf-8'))
    return encrypted_message.hex()

# 示例使用
random_string = generate_random_string()
encrypted_key = getRSAkey('your_e_hex', 'your_f_hex', random_string)

print(f'Random String: {random_string}')
print(f'Encrypted Key: {encrypted_key}')

javascript

function c(a, b, c) {
    setMaxDigits(131);
    var d = new RSAKeyPair(b, "", c);
    var e = encryptedString(d, a);
    return e;
}

function d(d, e, f, g) {
    var h = {};
    var i = generateRandomString(16); // 产生16位随机数
    h.encText = b(d, g); // g和i是密钥
    h.encText = b(h.encText, i); // 返回的是parmas
    h.encSecKey = c(i, e, f);
    return h;
}

function generateRandomString(length) {
    var chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
    var result = '';
    for (var i = 0; i < length; i++) {
        result += chars.charAt(Math.floor(Math.random() * chars.length));
    }
    return result;
}

// 示例使用
var randomString = generateRandomString(16);
var encryptedKey = c(randomString, 'your_e', 'your_f');
console.log('Random String:', randomString);
console.log('Encrypted Key:', encryptedKey);